> For the complete documentation index, see [llms.txt](https://documentation.immuta.com/2024.3/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.immuta.com/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery.md).

# Manage Sensitive Data Discovery

## Command overview: `immuta sdd`

This command allows you to customize and run SDD in your instance of Immuta. The table below illustrates subcommands and arguments.

| Subcommands                                                                                                                             | Description                                           |
| --------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------- |
| [<mark style="color:blue;">`classifier`</mark>](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/classifiers.md) | Manage SDD identifiers.                               |
| [<mark style="color:blue;">`run`</mark>](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/sdd.md)                | Run SDD on specific data sources or all data sources. |
| [<mark style="color:blue;">`template`</mark>](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/templates.md)     | Manage SDD frameworks.                                |

### Options

Use these options to get more details about the `sdd` command or any of its subcommands:

* `-h`
* `--help`

```bash
$ immuta sdd -h
Manage Sensitive Data Discovery

Usage:
  immuta sdd [command]

Available Commands:
  classifier  Manage Sensitive Data Discovery Classifiers
  run         Run Sensitive Data Discovery with provided options
  template    Manage Sensitive Data Discovery Templates

Flags:
  -h, --help   Help for sdd

Global Flags:
      --config string    Config file (default $HOME/.immutacfg.yaml)
  -p, --profile string   Specifies the profile for what instance/api the cli will use (default "default")

Use "immuta sdd [command] --help" for more information about a command.
```

## SDD workflow

Two common workflows for using SDD are outlined below. The first illustrates how to apply a global framework to all data sources, while the second outlines how users can create and apply frameworks to data sources they own.

The tutorials linked below show how to use the CLI to complete this workflow. For an overview of how sensitive data discovery works, see [this overview](/2024.3/discover-your-data/data-discovery.md).

### Workflow 1: Apply the global framework to all data sources

1. Data governor [creates a framework](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/templates.md#create-an-identification-framework) using one or more identifiers.
2. [System administrator adds this framework as the global framework so that it applies to all data sources](/2024.3/discover-your-data/data-discovery/how-to-guides/global-sdd.md).
3. [Users trigger SDD on data sources](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/sdd.md).

### Workflow 2: Apply a framework to a specific data source

1. Data governor creates one or more [identifiers](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/classifiers.md#create-an-identifier).
2. [Data owner creates a framework containing one or more identifiers](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/templates.md#create-an-identification-framework).
3. [Data owner triggers SDD on one or more data sources](/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery/sdd.md) and resulting tags are applied to columns where criteria were met.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://documentation.immuta.com/2024.3/developer-guides/the-immuta-cli/manage-sensitive-data-discovery.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.